Sovereign InfraOps Engineer: Secure Kubernetes & Air-Gapped

ICEYE; Espoo; Hybrid; EUR 75,000 - 110,000; Full time

Job summary

ICEYE in Espoo seeks a Sovereign Infrastructure Operations Engineer to own the secure bare-metal and virtualization stack, including production Kubernetes, ensuring compliance with strict European security controls. You will work in a hybrid IT environment, coordinating change management, patching, and disaster recovery across air-gapped or high-security sites, reporting to the Head of IT.

Candidates should have 5+ years in Linux admin, production Kubernetes, and experience with IAM, PKI, and

Qualifications

• 5+ years hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, with a focus on Linux environments.
• Practical experience running and maintaining production Kubernetes clusters.
• Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching.
• Practical knowledge of Katakri, VS-NfD, or equivalent European security/compliance frameworks (ISO 27001, NIS2).
• Solid understanding of enterprise networking fundamentals (VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, PKI).
• Eligibility to obtain and maintain a high-level national security clearance in Finland.

Responsibilities

• Manage configuration state across physical and virtual assets using GitOps with Infrastructure as Code tools, removing manual configuration drift in secure environments in alignment with policy.
• Maintain and support production Kubernetes clusters in restricted environments, covering upgrades, storage integration, and registry management.
• Administer secure platform core services (Mattermost, Nextcloud, Keycloak, OpenBao), including deployment, upgrades, and integration with local IAM and storage.
• Run weekly meetings (change management, vulnerability management) with stakeholders on the infrastructure side.
• Maintain technical security controls to satisfy Katakri, VS-NfD, and related European frameworks (ISO 27001, NIS2) including patch management, hardening, and access control.
• Maintain secure infrastructure networking (VLAN isolation, mTLS, PKI) and identity integrations, in coordination with network and security teams.
• Execute backup and disaster recovery procedures and routine hardware maintenance across air-gapped or high-security sites.

Skills

Linux administration

Kubernetes

GitOps

Infrastructure as Code

Security frameworks (ISO 27001, NIS2)

Networking fundamentals

Vulnerability patching

Finnish security clearance eligibility

Tools

Ansible

Terraform

Puppet

Ceph

ZFS

Keycloak

Job description

ICEYE in Espoo seeks a Sovereign Infrastructure Operations Engineer to own the secure bare-metal and virtualization stack, including production Kubernetes, ensuring compliance with strict European security controls. You will work in a hybrid IT environment, coordinating change management, patching, and disaster recovery across air-gapped or high-security sites, reporting to the Head of IT.

Candidates should have 5+ years in Linux admin, production Kubernetes, and experience with IAM, PKI, and